7

druid 依赖 log4j 1.x,会受到漏洞影响吗?

 2 years ago
source link: https://www.v2ex.com/t/822566
Go to the source link to view the article. You can view the picture content, updated content and better typesetting reading experience. If the link is broken, please click the button below to view the snapshot at that time.
neoserver,ios ssh client

V2EX  ›  Java

druid 依赖 log4j 1.x,会受到漏洞影响吗?

  ciki · 23 小时 56 分钟前 · 862 次点击

不知道为啥 druid 到现在还依赖这个,也不能去掉,有影响吗?

4 条回复    2021-12-16 14:15:58 +08:00

2i2Re2PLMaDnghL      22 小时 12 分钟前

1.x 不会受 44228 影响

via <https://logging.apache.org/log4j/2.x/security.html>
> Versions Affected: all versions from 2.0-beta9 through 2.12.1 and 2.13.0 through 2.14.1


About Joyk


Aggregate valuable and interesting links.
Joyk means Joy of geeK